feat: deceptive tripwire responses + canary credentials (#12) #22
cport1ci.yml
on: pull_request
PHP Coding Standards
16s
Static Analysis
38s
PHP 7.4 Compatibility
19s
Annotations
11 errors and 13 warnings
|
PHP Coding Standards:
webdecoy.php#L2292
$_POST['ip'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L2266
$_POST['reason'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L2265
$_POST['ip'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L2190
$_POST['api_key'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L2018
Detected usage of a non-sanitized input variable: $_POST['detection']
|
|
PHP Coding Standards:
webdecoy.php#L1565
Processing form data without nonce verification.
|
|
PHP Coding Standards:
webdecoy.php#L1565
Processing form data without nonce verification.
|
|
PHP Coding Standards:
webdecoy.php#L1335
$_SERVER['HTTP_USER_AGENT'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L1237
$_COOKIE['webdecoy_verified'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L1015
Detected usage of a non-sanitized input variable: $_SERVER['HTTP_COOKIE']
|
|
Static Analysis:
webdecoy.php#L2692
Access to an undefined property object::$response.
|
|
PHP Coding Standards
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L49
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L43
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L43
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L25
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L25
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
webdecoy.php#L2113
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
webdecoy.php#L1435
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
webdecoy.php#L1333
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
webdecoy.php#L1173
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
webdecoy.php#L1132
Use of a direct database call is discouraged.
|
|
PHP 7.4 Compatibility
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Static Analysis
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|